VPN/Direct Connect Access

Scenarios

If your local data center or private network cannot access SWR through a public network, you can use Direct Connect or VPN to connect to Huawei Cloud VPC and use a VPC endpoint to access SWR.

This applies only to pushing images. To pull images, you also need to configure a VPC endpoint for accessing the private IP address of OBS.

Procedure

Create a VPC. For details, see Creating a VPC.
Create a Direct Connect connection or VPN so that the data center can connect to the VPC through Direct Connect or VPN.
Buy a VPC endpoint.
1. Log in to the management console.
2. Click in the upper left corner and select the desired region and project.
3. In the Service List in the upper left corner, choose Networking > VPC Endpoint.
4. On the displayed page, click Buy VPC Endpoint.
5. Configure the parameters as prompted.
6. Click Next.
7. Confirm the order details and click Submit.
Obtain the private IP address and domain name for accessing the VPC.

By default, the domain name resolution rule is automatically added to Huawei Cloud VPCs.

You only need to configure hosts for non-Huawei Cloud endpoints.
1. Go to the VPC endpoint list.
2. Locate the purchased VPC endpoint and click the ID to go to the details page.
3. On the page displayed, you can view the IP address and private domain name of the VPC endpoint.
  
  Figure 1 Endpoint details page
Configure hosts of the local data center. The hosts IP address consists of the IP address and private domain name of the VPC endpoint. Example:

Figure 2 Example hosts

In this section, 172.xx.xx.xx swr.ap-southeast-1.myhuaweicloud.com is only an example. Replace it with the actual IP address and private domain name.

There are two configuration methods:

Configuring Hosts for Linux

Customizing DNS Hosts
- Configuring Hosts for Linux:
1. Run the following command to open the /etc/hosts file:
```
sudo vim /etc/hosts
```
2. Add a custom domain name in the format of xx.xx.xx.xx swr.xx -xx.myhuaweicloud.com.
  
  xx.xx.xx.xx and swr.xx -xx.myhuaweicloud.com indicate the IP address and domain name obtained in 4, respectively.
3. Run the following command to restart the network.
```
sudo/etc/init.d/networking restart
```
- Customizing DNS Hosts:
1. Obtain the IP address of the VPC endpoint by referring to 4.
2. Configure DNS forwarding rules on the DNS server in the local data center.
  The method of configuring DNS forwarding rules varies depending onOSs. For details, see the operation guide of the corresponding DNS software.
  
  This step uses the Linux OS and Bind (common DNS software) as an example.
  1. Edit the /etc/named.conf file to add a zone.
```
zone " swr.xx-xx.myhuaweicloud.com " IN {
  type master;
  file " /var/named/swr.xx-xx.myhuaweicloud.com.zone"; 
};
```
    swr.xx-xx.myhuaweicloud.com indicates the private domain name obtained in Step 4.
  2. Configure forward DNS resolution. Create a file /var/named/swr.xx-xx.myhuaweicloud.com.zone mentioned in a.
```
$TTL     604800
@ IN      SOA       swr.xx-xx.myhuaweicloud.com. root.localhost. (
                           2         ; Serial
                      604800         ; Refresh
                       86400         ; Retry
                     2419200         ; Expire
                      604800 )       ; Negative Cache TTL
;
@    IN   NS   swr.xx-xx.myhuaweicloud.com.
swr.xx-xx.myhuaweicloud.com.    IN   A     xx.xx.xx.xx
```
  3. Restart the service.
    /sbin/service named restart
  - You can query SWR endpoints in different regions in Regions and Endpoints.
  - If no DNS server is available in the local data center, add the endpoint IP address for accessing DNS to the /etc/resolv.conf file of the local data center.
  - swr.xx-xx.myhuaweicloud.com indicates the IP address obtained in Step 4.
Run the following command to verify the configuration and check the output.

ping swr.xx -xx.myhuaweicloud.com
Use this domain name (swr.xx -xx.myhuaweicloud.com) in the later access to SWR.